Skip to content

Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage

Moderate severity GitHub Reviewed Published May 14, 2026 in FlowiseAI/Flowise • Updated May 20, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts